Click here to Skip to main content
16,004,991 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
QuestionSoftware for process mapping? Pin
Mithra409610-Jan-06 10:01
Mithra409610-Jan-06 10:01 
AnswerRe: Software for process mapping? Pin
David Crow10-Jan-06 10:04
David Crow10-Jan-06 10:04 
AnswerRe: Software for process mapping? Pin
Neville Franks10-Jan-06 12:11
Neville Franks10-Jan-06 12:11 
GeneralRe: Software for process mapping? Pin
Taka Muraoka10-Jan-06 15:00
Taka Muraoka10-Jan-06 15:00 
GeneralRe: Software for process mapping? Pin
Neville Franks10-Jan-06 15:44
Neville Franks10-Jan-06 15:44 
GeneralRe: Software for process mapping? Pin
Mithra409610-Jan-06 16:09
Mithra409610-Jan-06 16:09 
GeneralRe: Software for process mapping? Pin
Neville Franks10-Jan-06 16:20
Neville Franks10-Jan-06 16:20 
GeneralRe: Software for process mapping? Pin
Mithra409610-Jan-06 17:13
Mithra409610-Jan-06 17:13 
My intention was to use the profiler as a reversing tool, but based on what you've said that might not be appropriate.

I'm probably going to have to write a program that performs the functionality I need.

What I want to do is, identify the offset of each individual function within an executable ( or DLL ).
I can manually make this list from disassembler output if I need to.

Once I have this list of function offsets, I'd like to place a hook on every one of them so that execution will detour into some custom code of my own, where the frequency of that specific function call will be tabulated, before resuming normally. With that data in hand, I hope to be able to map out graphically which functions are being hit and at what frequency. This tool would also be useful in displaying frequency relationships between other functions. Case in point, if I was interested in all functions related to outgoing packets ( which I am ), I could identify the function that contained the winsock Send call, track how frequently it gets called over time, and display a list of probable functions based on similar call frequency.

When you've got a threaded program with 26,000 individual functions, backtracing from Send becomes meticulous and unreliable, especially if the code you're trying to find is not explicitly linked. If I can track call frequencies throughout an application, I believe I can narrow down the list of candidates and more quickly find what I'm looking for.

My first thought was to actually write thousands of detours into the running process so that execution would jump out ( into a DLL I injected ), tabulate the call, and resume, but I don't think I will be able to do this practically.

There must be a better method, perhaps setting a hook on each function?
GeneralRe: Software for process mapping? Pin
Taka Muraoka11-Jan-06 0:17
Taka Muraoka11-Jan-06 0:17 
QuestionMFC Pointers Pin
LCI10-Jan-06 9:46
LCI10-Jan-06 9:46 
AnswerRe: MFC Pointers Pin
Nish Nishant10-Jan-06 9:48
sitebuilderNish Nishant10-Jan-06 9:48 
GeneralRe: MFC Pointers Pin
LCI10-Jan-06 9:58
LCI10-Jan-06 9:58 
GeneralRe: MFC Pointers Pin
Nish Nishant10-Jan-06 10:08
sitebuilderNish Nishant10-Jan-06 10:08 
GeneralRe: MFC Pointers Pin
Christian Graus10-Jan-06 10:45
protectorChristian Graus10-Jan-06 10:45 
AnswerRe: MFC Pointers Pin
David Crow10-Jan-06 10:01
David Crow10-Jan-06 10:01 
QuestionList control size. Pin
Maximilien10-Jan-06 9:10
Maximilien10-Jan-06 9:10 
AnswerRe: List control size. Pin
Ryan Binns10-Jan-06 15:00
Ryan Binns10-Jan-06 15:00 
AnswerRe: List control size. Pin
PJ Arends10-Jan-06 15:26
professionalPJ Arends10-Jan-06 15:26 
QuestionChanging read to read/write Pin
Martin Marvinski10-Jan-06 7:00
Martin Marvinski10-Jan-06 7:00 
AnswerRe: Changing read to read/write Pin
Curtis Schlak.10-Jan-06 7:16
Curtis Schlak.10-Jan-06 7:16 
AnswerRe: Changing read to read/write Pin
Nish Nishant10-Jan-06 7:39
sitebuilderNish Nishant10-Jan-06 7:39 
GeneralRe: Changing read to read/write Pin
Martin Marvinski10-Jan-06 8:01
Martin Marvinski10-Jan-06 8:01 
QuestionAsk help for Microsoft CryptoAPI Pin
hanofee10-Jan-06 6:24
hanofee10-Jan-06 6:24 
AnswerRe: Ask help for Microsoft CryptoAPI Pin
Gavin Taylor10-Jan-06 7:24
professionalGavin Taylor10-Jan-06 7:24 
GeneralRe: Ask help for Microsoft CryptoAPI Pin
hanofee10-Jan-06 21:53
hanofee10-Jan-06 21:53 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.